| Age | Commit message (Collapse) | Author |
|---|
|
go install go.wit.com/apps/go-clone@latest
go install go.wit.com/apps/go-mod-clean@latest
go-clone --recusive go.wit.com/lib/git2go
Signed-off-by: Jeff Carr <[email protected]>
|
|
Update libgit2 to v1.5.0. Replace `SmartProxyOptions()` with `SmartRemoteConnectOptions()`.
Fixes: https://github.com/libgit2/git2go/issues/899
Signed-off-by: Sanskar Jaiswal <[email protected]>
Co-authored-by: lhchavez <[email protected]>
|
|
🔒 This is a security release to provide compatibility with git's
changes to address [CVE
2022-24765](https://github.blog/2022-04-12-git-security-vulnerability-announced/).
libgit2 (and by extension git2go) are not directly affected by this
vulnerability, because libgit2 does not directly invoke any executable.
But we are providing these changes as a security release for any users
that use libgit2 for repository discovery and then also use git on that
repository. In this release, we will now validate that the user opening
the repository is the same user that owns the on-disk repository. This
is to match git's behavior.
In addition, we are providing several correctness fixes where invalid
input can lead to a crash. These may prevent possible denial of service
attacks. At this time there are not known exploits to these issues.
|
|
This commit introduces libgit2 v1.3.0 to git2go, which brings a large
number of [bugfixes and
features](https://github.com/libgit2/libgit2/releases/tag/v1.3.0).
This also marks the start of the v33 release.
|
|
This commit introduces libgit2 v1.2.0 to git2go, which brings a large
number of [bugfixes and
features](https://github.com/libgit2/libgit2/releases/tag/v1.2.0).
This also marks the start of the v32 release.
|
|
The libgit2 `v1.1.0` is released two weeks ago. This PR allows `git2go` to link against the new version.
|
|
This uprevs libgit2 to the latest and greatest.
|
|
This uprevs libgit2 to the latest and greatest.
|
|
This uprevs libgit2 to the latest and greatest. Notably,
* Fixes the interface of `git_mempack_reset`, since it now returns an
`int` instead of being `void`.
Fixes: #533
|
|
|
|
|
|
New version is here!
|
|
This includes updating the `Index.WriteTreeTo` test as it was abusing an
oversight of the object creation safety checks and creating a tree referencing
a non-existent blob. Instead we update it to the primary purpose of this method
which is to write into a repository from an unattached index.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Newer commits have changed the build scripts such that the HTTP parser is not
included in the static library.
This also reverts commit ecf4f7a137ba69014d414b8de20eb58e115bfd73.
|
|
|
|
|
|
|
|
|
|
|
|
This version reloads the index on checkout, which showed we were not
persisting the updated index to disk and thus would have conflicts on
checkout.
|
|
|
|
|
|
|
|
|
|
The API changes are:
- `*Remote.Connect`
```go
// from:
func (o *Remote) Connect(direction ConnectDirection, callbacks *RemoteCallbacks) error
// to:
func (o *Remote) Connect(direction ConnectDirection, callbacks *RemoteCallbacks, headers []string) error
```
- `*Remote.ConnectFetch` - `headers` was added as above
- `*Remote.ConnectPush` - `headers` was added as above
|
|
|
|
|
|
|
|
|
|
|
|
There's been some changes to the checkout strategy, especially the
SAFE_CREATE mode, which is now the RECREATE_MISSING flag, though that
shouldn't be necessary to use in the general case.
The largest changes come from the removal of the signture from
ref-modifying functions/methods and the removal of the reflog string in
all but those directly related to moving references.
|
|
|
|
Update libgit2 to a version that includes https://github.com/libgit2/libgit2/pull/2804.
|
|
|
|
This gets rid of the Push object. All network now goes through the
Remote object.
|
|
Fix calls to C.git_treebuilder_create and C.git_treebuilder_write.
|
|
This deprecates the Push struct in favour of Remote.Push()
|
|
|
|
|
|
|
|
The option to ignore the server's certificate has been removed, replaced
witha callback for the user to perform their own checking.
Remote.Fetch() now performs opportunistic updates and takes a list of
refspecs to use as the active set for a particular fetch.
|
|
|
|
|
